libzypp (SUSE:Linux Micro 6.0) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Micro 6.0 package libzypp, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2026-44941 — CVSS 8.4 (high): A relative path traversal in the "keyhint" option in repomd.xml parsing of libzypp before 17.38.12 can be used by attackers able to supply…
• CVE-2026-44942 — CVSS 6.5 (medium): A path traversal in handling the "path" component of .repo files processed by libzypp before 17.38.13 in the 17.x series, or before…